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AMENDMENTS TO THE CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

1 . (Currently Amended) An Identity Generator device <6) arranged for 
generating a user's service indicator (US I ) for a user to access a number of services 
offered by a service provider (1 ; 2; 3) through a network operator where user data (4) 
for the user are accessible, this user's service indicator being usable between the 
service provider (SP 1 ; SP 2; SP N) domain and the network operator (IOP-) domain to 
unambiguously identify the user at each respective domain, the Identity Generator 
device comprising charact e riz o d in that it comprisos : 

- means for obtaining a master user's identifier (U+D) usable to identify the user at 
the operator's network; 

- means for obtaining a service identifier (SID) , indicative of services to be 
accessed at the service provider; and 

- means {£} for constructing a user's service indicator (USI) that includes the 
master user's identifier (U+D) and the service identifier (S I D) . 

2. (Currently Amended) The Identity Generator device of claim 1 , 
wherein the service identifier (SID) , indicative of services to be accessed at the service 
provider, comprises at least one element selected from: a service provider indicator 
(SP4), and a number of service indicators (S1 I ; SM I ) . 

3. (Currently Amended) The Identity Generator device of claim 1 . 
further comprising: 

- means for obtaining at least one element selected from: network operator 
identifier (O I D) , auxiliary value (Sa l t) , expiry time, and integrity code; and 

- means for including the at least one element into the user's service indicator 
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4. (Currently Amended) The Identity Generator device of claim 1 , 
wherein the master user's identifier (U4D) is built up as a function (SHA 1) of a real user 
identity (MSISDN) . 

5. (Currently Amended) The Identity Generator device of claim 1 any 
prec e d i ng claim , further comprising means for carrying out a symmetric cipher of the 
user's service indicator using a ciphering key (KE). 

6. (Currently Amended) The Identity Generator device of claim 5. 
wherein the ciphering key (KE) is unique for all the applicable service providers (1 ; 2; 
3). 

7. (Currently Amended) The Identity Generator device of claim 5. 
wherein the ciphering key (KE) is different per each service provider (1; 2; 3) . 

8. (Currently Amended) The Identity Generator device of claim 1 a«y 
preceding claim , further comprising a Decomposer component (7) having means for 
carrying out a reverse generation (F-4) to obtain a master user's identifier (UJ-D) from a 
given user's service indicator (USI) . 

9. (Currently Amended) A Decomposer component (7-) having means 
for carrying out a reverse generation (F-4) to obtain a master user's identifier (U I D) from 
a given user's service indicator (USI) , the Decomposer component (7) arranged for 
integration in, or co-operation with, at least one entity selected from: the Identity 
Generator device (§) and other entities at the identity provider domain or at the service 
provider domain. 

1 0. (Currently Amended) The Decomposer component of claim 9, 
wherein the means for carrying out a reverse generation (P-44 includes means for 
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obtaining the service identifier (SI©) used to generate the given user's service indicator 

(\ |C |\ 

1 1 . (Currently Amended) The Decomposer component of claim 9, 
wherein the means for carrying out a reverse generation further comprises (F 1) may 
further i nc l ud e 

means for obtaining at least one element selected from: network operator 
identifier (©ID), and ciphering key (KE) used to generate the given user's service 
indicator (USJ). 

1 2. (Currently Amended) The Decomposer component of claim 9, 
wherein the means for carrying out a reverse generation further comprises (F 1) may 
furth e r i nc l ud e: 

- means for obtaining applicable expiry time criteria ; and 

- means for verifying the validity of a given temporary user's service indicator (T- 
USI) against said expiry time criteria. 

1 3. (Currently Amended) The Decomposer component of claim 9. further 
comprising means for verifying the validity of a given user's service indicator (US I ) by 
making use of the master user's identifier (UiB) as a search key towards a user 
directory system (4). 

14. (Currently Amended) A method for generating a user's service 
indicator (USI) intended for a user (£) to access a number of services offered by a 
service provider (1 ; 2; 3) through a network operator where user data (4) for the user 
are accessible, this user's service indicator being usable between the service provider 
(SP 1 ; SP 2; SP N) domain and the network operator (IOR) domain to unambiguously 
identify the user at each respective domain, the method charact e riz e d by comprising the 
steps of : 

a stop of obtaining a master user's identifier( UH D ) usable to identify the user (§) 
at the operator's network; 
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a otop of obtaining a service identifier (SID), indicative of services to be 
accessed at the service provider; and 

a step of constructing a user's service indicator that includes the master user's 
identifier and the service identifier. 

1 5. (Currently Amended) The method of claim 14, wherein the step of 
obtaining a service identifier includes a st e p of obtaining at least one element selected 
from: a service provider indicator (SP4), and a number of service indicators (S1 I ; SMI) . 

16. (Currently Amended) The method of claim 14, further comprising: 
a step of obtaining at least one element selected from: network operator 

identifier (QID) , auxiliary value (Sa l t) , expiry time, and integrity code ; and 

a st e p of including the at least one element into the user's service indicator 

17. (Currently Amended) The method of claim 14, wherein the step of 
obtaining a master user's identifier includes a step of applying a function (SHA 1) to a 
real user identity (MS I SDN) . 

18. (Currently Amended) The method of claim 14, further comprising a 
step of carrying out a symmetric cipher of the user's service indicator using a ciphering 
key(K€). 

1 9. (Currently Amended) The method of claim 1 8, wherein the ciphering 
key (KE) is unique for all the applicable service providers. 

20. (Currently Amended) The method of claim 1 8, wherein the ciphering 
key (KE) is different per each service provider. 
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21 . (Currently Amended) The method of claim 20, further comprising a 
st e p of determining a service provider issuing a communication based on a given user's 
service indicator. 

22. (Currently Amended) The method of claim 14 any pr e ced i ng c l aim , 
further comprising a st e p of carrying out a reverse generation (F-4) to obtain the master 
user's identifier (UID) from a given user's service indicator (US I ) . 

23. (Currently Amended) An Identity Generator device for generating a 
user's service indicator for a user to access a number of services offered by a service 
provider through a network operator where user data for the user are accessible, this 
user's service indicator being usable between the service provider domain and the 
network operator domain to unambiguously identify the user at each respective domain, 
the Identity Generator device comprising: 

means for obtaining a master user's identifier usable to identify the user at the 
operator's network; 

means for obtaining a service identifier, indicative of services to be accessed at 
the service provider; and 

means for constructing a user's service indicator that includes the master user's 
identifier and the service identifier, wherein said Identity Generator device is integrated 
in, or in close cooperation with, and entity of an identity provider network. 

.A us e of the Identity Gonorator d o vic e (6) of c l a i m 1 i ntogratod in, or in closo co 
operation with, an entity of an i d e ntity provid e r (IDP) network. 

24. (Currently Amended) The Identity Generator device use of claim 23. 
wherein the identity provider (JDP-) network is an operator's network where the user data 
are accessible. 

25. (Currently Amended) The Identity Generator device use of claim 24. 
wherein the entity is a Central Provisioning Entity responsible for provisioning tasks in 
the operator's network. 
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26. (Currently Amended) The Identity Generator device use of claim 24, 
wherein the entity is a User Directory System (4) storing user data. 

27. (Currently Amended) The Identity Generator device use of claim 24, 
wherein the entity is a Border Gateway placed at the border of the operator domain. 

28. (Currently Amended) The Identity Generator device use of claim 27, 
wherein the Border Gateway is an entity selected from: an HTTP Proxy, a WAP 
Gateway, and a Messaging Gateway. 

29. (Canceled) 
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